tibco spotfire web player vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x prior to 3.3.3, 4.0.x prior to 4.0.3, 4.5.x prior to 4.5.1, and 5.0.x prior to 5.0.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Tibco Spotfire Web Player 3.3 Tibco Spotfire Web Player 3.3.2 Tibco Spotfire Web Player 4.0 Tibco Spotfire Web Player 4.0.1 Tibco Spotfire Web Player 4.0.2 Tibco Spotfire Web Player 4.5.0 Tibco Spotfire Web Player 5.0.0

The Engine in TIBCO Spotfire Web Player 3.3.x prior to 3.3.3, 4.0.x prior to 4.0.3, 4.5.x prior to 4.5.1, and 5.0.x prior to 5.0.1 does not properly implement access control, which allows remote malicious users to obtain sensitive information or modify data via unspecified vector...

Tibco Spotfire Web Player 3.3 Tibco Spotfire Web Player 3.3.2 Tibco Spotfire Web Player 4.0.1 Tibco Spotfire Web Player 4.0.2 Tibco Spotfire Web Player 4.0 Tibco Spotfire Web Player 4.5.0 Tibco Spotfire Web Player 5.0.0

Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x prior to 6.0.2 and 6.5.x prior to 6.5.2, Spotfire Deployment Kit 6.0.x prior to 6.0.2 and 6.5.x prior to 6.5.2, and Silver Fabric Enabler for Spotfire Web Player prior to 1.6.1 allows remote authenticated users to obta...

Tibco Silver Fabric Enabler Tibco Spotfire Deployment Kit 6.5.1 Tibco Spotfire Deployment Kit 6.0.0 Tibco Spotfire Deployment Kit 6.0.1 Tibco Spotfire Deployment Kit 6.5.0 Tibco Spotfire Web Player 6.0.1 Tibco Spotfire Web Player 6.5.0 Tibco Spotfire Web Player 6.5.1 Tibco Spotfire Web Player 6.0.0

Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst prior to 5.5.2, 6.0.x prior to 6.0.3, 6.5.x prior to 6.5.3, and 7.0.x prior to 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x prior to 7.0.1; Spotfire Automa...

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x prior to 3.3.4, 4.5.x prior to 4.5.1, 5.0.x prior to 5.0.2, 5.5.x prior to 5.5.1, and 6.x prior to 6.0.2; Spotfire Professional 4.0....

Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an malicious user to compromise the application, access or modify...

Tibco Spotfire Desktop Language Packs 7.6.0 Tibco Spotfire Desktop Language Packs 7.7.0 Tibco Spotfire Client -Tibco Spotfire Web Player Client -Tibco Spotfire Desktop 7.6.0 Tibco Spotfire Desktop 7.7.0 Tibco Spotfire Analyst 7.7.0 Tibco Spotfire Connectors 7.6.0 Tibco Spotfire Deployment Kit 7.7.0

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server prior to 10.1.2; Server prior to 3.3.3; and Web Player, Automation Services, and Professional prior to 4.0.2 allow remote malicio...

Tibco Spotfire Server 3.2.0 Tibco Spotfire Server 3.1.0 Tibco Spotfire Server 3.1.1 Tibco Spotfire Server 3.0.0 Tibco Spotfire Server 3.0.1 Tibco Spotfire Analytics Server 10.0.1 Tibco Spotfire Analytics Server 10.0.0 Tibco Spotfire Server 3.3.0 Tibco Web Player Automation Services Tibco Spotfire Professional

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author&...

1 Github repository

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs ...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook